Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/unbj6R1pt1reWtClkg6u6qP97qU.roa
File: unbj6R1pt1reWtClkg6u6qP97qU.roa (raw, json)
Hash identifier: ve6WwDA/IGFZ6obWRDfS0N46O05JHSdRDsvfP7NEV7E=
Subject key identifier: BA:76:E3:E9:1D:69:B7:5A:DE:5A:D0:A5:92:0E:AE:EA:A3:FD:EE:A5
Certificate issuer: /CN=44566c1a283d553ef3f656f57223984dda7c355f
Certificate serial: 019FFFAC746744563894CAA911856D997DF4
Authority key identifier: 44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/unbj6R1pt1reWtClkg6u6qP97qU.roa
Signing time: Fri 14 Aug 2026 09:48:39 +0000
ROA not before: Fri 14 Aug 2026 09:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29399
IP address blocks: 170.84.252.0/23 maxlen: 27
170.84.252.0/24 maxlen: 24
170.84.253.0/24 maxlen: 24
178.250.88.0/21 maxlen: 27
178.250.88.0/24 maxlen: 24
178.250.89.0/24 maxlen: 24
178.250.90.0/24 maxlen: 24
178.250.91.0/24 maxlen: 24
178.250.92.0/24 maxlen: 24
178.250.93.0/24 maxlen: 24
178.250.94.0/24 maxlen: 24
178.250.95.0/24 maxlen: 24
185.49.128.0/22 maxlen: 27
185.49.128.0/24 maxlen: 24
185.49.129.0/24 maxlen: 24
185.49.130.0/24 maxlen: 24
185.49.131.0/24 maxlen: 24
185.212.216.0/22 maxlen: 27
185.212.216.0/24 maxlen: 24
185.212.217.0/24 maxlen: 24
185.212.218.0/24 maxlen: 24
185.212.219.0/24 maxlen: 24
195.137.222.0/23 maxlen: 27
195.149.85.0/24 maxlen: 27
212.85.224.0/24 maxlen: 24
212.85.225.0/24 maxlen: 24
212.85.226.0/24 maxlen: 24
212.85.227.0/24 maxlen: 24
2a03:5d00::/29 maxlen: 48
2a03:5d00::/32 maxlen: 32
2a03:5d01::/32 maxlen: 32
2a03:5d02::/32 maxlen: 32
2a03:5d03::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:ac:74:67:44:56:38:94:ca:a9:11:85:6d:99:7d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44566c1a283d553ef3f656f57223984dda7c355f
Validity
Not Before: Aug 14 09:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba76e3e91d69b75ade5ad0a5920eaeeaa3fdeea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:ea:43:33:b6:ad:23:e5:3c:36:f0:6c:c5:
bd:72:04:29:f1:17:92:b8:c5:57:c9:26:34:e7:af:
e6:80:ec:9d:0a:46:59:25:4e:0c:8c:60:c8:2d:33:
ab:41:5e:ba:7e:c8:5b:bb:39:81:85:05:71:42:43:
4b:db:cb:ce:d1:17:37:08:46:85:22:ce:fd:9f:77:
52:6d:0b:28:e7:0d:a4:1d:5b:d9:cb:58:45:f8:07:
c7:6e:fe:87:e0:42:88:36:bd:18:5f:ca:73:30:c8:
86:e2:73:15:4f:3a:65:53:45:6f:1e:a5:58:98:01:
85:81:52:ae:97:49:71:a0:49:75:13:87:d9:5b:0f:
14:28:35:50:5a:d0:1b:88:08:bf:18:46:3c:13:da:
76:3e:8b:2c:5c:5e:0c:d8:40:c1:06:c7:5a:cf:a7:
10:eb:df:29:60:a3:e5:86:db:8b:d6:c0:dc:52:a4:
d5:dd:07:27:a7:ec:be:d3:9e:85:9a:d7:f0:4b:43:
c6:57:f8:f3:0a:3e:86:28:2b:a1:79:e0:8f:38:6f:
ca:a3:fa:69:86:99:8a:98:a8:2e:a0:b4:0a:68:37:
05:d1:31:64:fd:2f:37:b2:b7:e5:78:97:90:db:83:
92:68:ba:ee:32:30:23:2a:a6:5b:62:bc:9f:32:d2:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:76:E3:E9:1D:69:B7:5A:DE:5A:D0:A5:92:0E:AE:EA:A3:FD:EE:A5
X509v3 Authority Key Identifier:
keyid:44:56:6C:1A:28:3D:55:3E:F3:F6:56:F5:72:23:98:4D:DA:7C:35:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFZsGig9VT7z9lb1ciOYTdp8NV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/unbj6R1pt1reWtClkg6u6qP97qU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/eeb813-f24c-4175-828b-9d58ce221843/1/RFZsGig9VT7z9lb1ciOYTdp8NV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.84.252.0/23
178.250.88.0/21
185.49.128.0/22
185.212.216.0/22
195.137.222.0/23
195.149.85.0/24
212.85.224.0/22
IPv6:
2a03:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
84:1b:a8:c8:12:01:66:25:c4:f2:ba:0b:e7:28:ab:68:98:7b:
b5:49:0f:d3:75:b9:2c:da:14:ad:d1:63:f7:15:60:28:c3:e3:
de:fb:8e:5c:97:8d:9c:c4:fa:0d:97:2d:74:64:d8:d7:66:49:
fc:75:b4:b1:94:13:2e:91:2e:84:85:4c:27:ad:47:3a:8e:c8:
5c:8e:9f:f7:99:2b:e2:79:d6:3c:04:9a:e7:c9:e0:9a:36:88:
c0:96:be:80:22:9c:da:77:46:05:cf:1f:fb:60:b2:3f:e8:0b:
34:08:df:b4:d9:dc:90:ce:6e:68:bd:16:fd:ea:e5:9a:9f:38:
d6:d8:63:cf:a4:03:6a:87:9a:01:9c:48:96:b6:a6:20:ad:31:
65:17:9d:2c:3e:b9:d6:b9:3f:1c:ec:f4:3e:92:23:fc:08:22:
f8:e2:6b:4e:f4:5b:96:fe:7a:21:ee:00:34:02:7d:10:a7:1b:
74:2e:38:b6:82:a5:ce:ae:2a:09:9a:e7:c0:34:06:d2:37:5d:
8f:78:2a:ca:7e:56:54:a7:9f:53:1b:4f:97:02:51:4f:ed:03:
42:ec:c7:94:ad:a2:70:ff:4f:52:50:3b:57:65:7a:b0:f3:8e:
ee:b9:e6:fe:51:db:a8:3a:f6:d8:e3:c8:03:06:fc:3e:77:f5:
0f:16:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:35 2026 by rpki-client